3 ms·
Yes, that seems to be the much more concerning aspect of this vulnerability. Without that, this vulnerability seems to only let you create local unprivileged u
by shawnz 6y ago
Yes, that seems to be the much more concerning aspect of this vulnerability.
Without that, this vulnerability seems to only let you create local unprivileged user accounts which isn't such a big deal.
- gmueckl 6y agoIt's not as big a deal, but not without impact. You only need a local privilege escalation to go from a user with no rights to a fully open system. And systems are much harder to secure against code running on them with access to all those juicy kernel facing unprivileged APIs...